CVE-2006-4777

🗓️ 14 Sep 2006 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

CVE-2006-4777 DirectAnimation Path Control (daxctle.ocx) buffer overflow in Internet Explorer 6.0 SP

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2006-4777	16 Jul 201000:00	–	circl
Check Point Advisories	Update Protection against Microsoft Internet Explorer DirectAnimation Path (daxctle.ocx) Vulnerabilities (MS06-067)	11 Oct 200600:00	–	checkpoint_advisories
Check Point Advisories	Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)	18 Nov 200900:00	–	checkpoint_advisories
Check Point Advisories	Internet Explorer Heap Spray Shell Code Execution (MS06-055 MS06-067; CVE-2006-4446; CVE-2006-4777; CVE-2006-4868; CVE-2009-2991)	18 Oct 200600:00	–	checkpoint_advisories
Cvelist	CVE-2006-4777	14 Sep 200600:00	–	cvelist
Exploit DB	Microsoft Internet Explorer - Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)	16 Jul 201000:00	–	exploitdb
Metasploit	MS06-067 Microsoft Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability	19 Oct 200821:03	–	metasploit
NVD	CVE-2006-4777	14 Sep 200600:07	–	nvd
Packet Storm	Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability	26 Nov 200900:00	–	packetstorm
securityvulns	Microsoft Security Bulletin MS06-067 Cumulative Security Update for Internet Explorer (922760)	14 Nov 200600:00	–	securityvulns

NVD

Node

microsoft ieMatch6.0sp1

Source	Link
osvdb	www.osvdb.org/28842
securityfocus	www.securityfocus.com/archive/1/446084/100/0/threaded
secunia	www.secunia.com/advisories/21910
us-cert	www.us-cert.gov/cas/techalerts/TA06-318A.html
securityfocus	www.securityfocus.com/archive/1/446085/100/0/threaded
microsoft	www.microsoft.com/technet/security/advisory/925444.mspx
securityfocus	www.securityfocus.com/archive/1/446246/100/0/threaded
securityfocus	www.securityfocus.com/archive/1/446065/100/0/threaded
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067

Parameter	Position	Path	Description	CWE
KeyFrame	path	/technet/security/Bulletin/MS06-067.mspx	Heap-based buffer overflow in DirectAnimation PathControl KeyFrame method exploited via IE ActiveX as described by the CVE-2006-4777 vulnerability	CWE-119
KeyFrame	path	/presentations/bh-eu-07/Sotirov/Sotirov-Source-Code.zip	Exploit/POC context for CVE-2006-4777 involving DirectAnimation.PathControl KeyFrame method heap overflow (reference material for the vulnerability)	CWE-119

16 Jun 2026 22:29Current

7.9High risk

Vulners AI Score7.9

CVSS 27.6

EPSS0.78755